All notes

January 2026

YOUR POST: Secure the path to production

  • DevSecOps
  • Cloud

The fastest way to ship an assistant is also the fastest way to ship a secret in an image. The release path has to scan, restrict, and record before traffic arrives.

Least privilege on the cluster, secrets outside the repo, and a gate that fails the build are cheaper than an incident write-up.

This is placeholder writing. Swap it for a post about a control you put on a real deployment.